k3s v1.36.0+k3s1 released on 06-05-2026
k3s v1.36.0+k3s1 is out now. It upgrades the embedded Kubernetes to v1.36.0 and tightens supply‑chain integrity with SHA256 checks for key downloaded binaries.
See the k3s GitHub changelog and the upstream Kubernetes v1.36 release notes for full details and guidance before you update.
What’s in this release
- Upgrades embedded Kubernetes to v1.36.0 and documents the updated embedded component matrix (Kine, SQLite, Etcd, Containerd, Runc, Flannel, Metrics‑server, Traefik, CoreDNS, Helm‑controller, Local‑path‑provisioner).
- Improves supply‑chain integrity by verifying SHA256 for downloaded binaries (kubelet, Vagrant zip, Go) and adding a sha256sum check for the k3s‑root archive.
- Multiple component and dependency bumps (containerd v2.2.3, runc v1.4.2, spegel v0.6.0‑k3s2, helm‑controller v0.17.1, kine v0.14.16, flannel v0.28.4, Traefik moved to v3.6.12 then v3.6.13) plus related image bumps, and fixes for embedded executor VPN config injection, SAN handling for comma‑separated node‑external‑ip lists, a Docker dual‑stack test, kubectl exec when using Docker, and a klipper‑helm revision check fix.
Upgrade notes
- No breaking changes are called out in these release notes; review the upstream Kubernetes v1.36 changelog and the k3s documentation before upgrading.
- If you need to roll back, the previous release referenced in the notes is v1.35.2+k3s1 — restore that release from your usual upgrade/rollback procedure or the k3s GitHub releases.
Share how the upgrade goes — open an issue on the k3s GitHub or drop a note in the k3s Slack channel so the community can see any problems or wins.
